Static task
static1
Behavioral task
behavioral1
Sample
ddc602444f2a77b6d00afe9ecc2e9d22_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ddc602444f2a77b6d00afe9ecc2e9d22_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ddc602444f2a77b6d00afe9ecc2e9d22_JaffaCakes118
-
Size
162KB
-
MD5
ddc602444f2a77b6d00afe9ecc2e9d22
-
SHA1
9a47e9e2f05af29ee6ad162be8e38bb1ba79f29a
-
SHA256
6370d48106a6c0921c35ecb73333a4447e7db8441c54f025213f62a1e34cec6e
-
SHA512
8a231d61ff782ee59686c90878d42da2cd7e5b62af8a439b989f7b6f1e3ec5071d42c8ad2b2d58988101cd5dbad2e6288dab41b03fe07d53a17c22b98ac78a8e
-
SSDEEP
1536:lIsCKHShK9vN9yfxvOsliXM6Xcy4G7Q08+zhHYfStBSHxvO:lIsCK99l8z2dZ5Q08EVE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddc602444f2a77b6d00afe9ecc2e9d22_JaffaCakes118
Files
-
ddc602444f2a77b6d00afe9ecc2e9d22_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
sayzge Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d7qiz Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edruwc5p Size: 4KB - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE